OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
9 views

OpenLDAP Multiple Directory Manager Accounts / Groups

So the documentation sucks and the interwebs hasn't produced the answers I am looking for. Hopefully somebody here has some wisdom to unleash... I recently built an OpenLDAP server for Linux ...
-2
votes
1answer
16 views

How to disable anonymous read on OpenLDAP using cn=config [duplicate]

I am a newbie with openldap 2.4 and I need to restrict read access to anonymous. Actually, if someone write ldapsearch -x -H ldap://myipaddrr he can see all entries of my HDB database. How can I ...
0
votes
0answers
11 views

LDAP: Segmentation fault

I have this error when I use ldapsearch: Segmentation fault I've removed and reinstalled openldap and openldap-servers and after that, throws me this error. /var/log/messages: ldapsearch[20232]: ...
0
votes
1answer
34 views

ldapsearch result: Can't contact LDAP server (-1)

Anyone knows which the problem? I installed LDAP: yum -y install openldap-servers and then checked is the installation work well starting slapd service and doing ldapsearch like this: ldapsearch ...
1
vote
0answers
66 views

500 Internal Server Error: Which is the issue? [on hold]

I've configured openldap in my server and also installed and configured mod_ldap but the server throws me a 500 Internal Server Error if I introduce right or bad user. I don't know if it's a bad ...
0
votes
0answers
9 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
1
vote
2answers
21 views

Bugzilla LDAP authentication broke after admin pw change - CentOS

Hey everyone I'm having an issue trying to get bugzilla authentication working again. I have looked all over and cant seem to find this anywhere. I am running bugzilla on a centOS server and over the ...
0
votes
1answer
23 views

LDAP: getent passwd don't show my recent user addition

I don't know why getent don't show my recently LDAP user addition. ldif file: dn: uid=user1,ou=People,dc=example,dc=com uid: user1 cn: user1 objectClass: account objectClass: posixAccount ...
0
votes
0answers
28 views

How to modify rootPW without edit .ldif manually but with ldap command tools in openldap?

I know if I want to change cn=config backend configuration, I shoud have my rootDN and rootPW set. But if I want to set my rootDN and rootPW, I need write previlege first. I think I run into endless ...
0
votes
0answers
21 views

How to add a new root suffix entry in openldap?

I try to add new root suffix in openldap following this guide Creating_and_Maintaining_Suffixes, but I got the error : ldap_add: Invalid syntax (21) additional info: objectclass: value #2 invalid ...
0
votes
1answer
114 views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
2
votes
0answers
34 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was ...
0
votes
1answer
31 views

OpenLDAP default configuration file is `/etc/ldap/slapd.d` rather than `/etc/ldap/slapd.conf`

My openldap (version 2.4.31) makes directory /etc/ldap/slapd.d as its default configuration files rather than /etc/ldap/slapd.conf as the old version does. I found it becomes more complicated to ...
0
votes
0answers
6 views

How to change OpenLDAP core attributes

Specifically, I need to add ORDERING caseIgnoreOrderingMatch to the givenName and surname attributes. I had hoped there was some way to do this using ldapmodify but the following is not working for me ...
0
votes
1answer
49 views

postgresql LDAP authentication

I am trying to give an LDAP authentication to my postgresql database. Here is my pg_hba.conf config file local all all md5 local all postgres md5 host all all 0.0.0.0/0 ldap ...
0
votes
0answers
18 views

Openldap ACLs don't work

I have following structure: dc=th,dc=company,dc=com | |->dmc | |->dmc_customer_company I create a group to manage write access to dmc_customer_company. Groups, divide by ...
0
votes
0answers
38 views

ldapsearch throws me a login fail (invalid credentials (49))

I'm starting with LDAP and trying to configure all in this tutorial step by step: http://wiki.openiam.com/pages/viewpage.action?pageId=7635198 But when I'm in 10th step: ldapsearch -h localhost -D ...
0
votes
0answers
19 views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: ...
0
votes
1answer
91 views

Installation OpenLDAP on CentOS 7

I'm following this OpenLDAP step by step tutorial: http://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=1 Important: I'm working on CentOS 7 But when in the first part I try to start ...
0
votes
0answers
15 views

OpenLDAP & SASL (DIGEST MD5) on Ubuntu 14.4

I have an existing ldap implementation that I would like to start enabling SASL. I don't really have a lot of experience with openldap/slapd and I'd like to be able to configure it using the current ...
2
votes
0answers
42 views

OpenLDAP TLS - test results in Bad file descriptor

I have set up an openldap server including tls on ubuntu 14.04 following this guide. While testing the connection, I get results that I can not find an explanation for. ldapsearch -xLLL -Z -W -D ...
0
votes
1answer
30 views

OpenLDAP check database

favorite I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue: something slapd process doesn't restart for error in database ( about some ...
0
votes
1answer
14 views

OpenLDAP structure mulitple locations

I am new to OpenLDAP and I am a bit stuck with the structure. Everywhere I see examples like this: dc=our,dc=company,dc=com -ou=USERS -ou=GROUPS -ou=ROLES Our company has more geographical ...
0
votes
0answers
8 views

openldap deny rootdn from ip

I want to restrict access to my openldap by the rootdn user from some IP range In case the password of the rootdn user leaks, I don't want this user being useable everywhere where the ldap port is ...
0
votes
1answer
18 views

pam_check_host_attr not working properly

Disclaimer: I'm new to ldap, so hopefully I haven't done anything majorly wrong! Aim: To centralise user credentials and restrict client login to certain machines. I have a barebones openLDAP server ...
0
votes
1answer
26 views

Modifying OpenLDAP configuration using cn=config

I am really new to OpenLDAP. I am trying to view all the settings in cn=config and attempt to change the value of olcSizeLimit (http://www.openldap.org/doc/admin24/slapdconf2.html#cn=config) I try ...
0
votes
0answers
25 views

“ldap_start_tls: Can't Contact LDAP server (-1)” on Red Hat Linux 6.4

I have OpenLDAP working on a local development machine that is running Fedora 20. I was able to install it and get it working fine for my own local testing. I'm now trying to install OpenLDAP on a ...
0
votes
0answers
29 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
-1
votes
1answer
39 views

OpenLDAP data purged/whipped on Ubuntu server upgrade 12.04 to 14.04 LTS

I upgraded my Ubuntu server from 12.04 to 14.04 using standard do-release-upgrade. After upgrade I found that my OpenLDAP directory data is purged. This is an unexpected outcome of an upgrade. I ...
0
votes
1answer
99 views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
0
votes
1answer
24 views

Unable to connect to server via LDAPS

I'm running OpenLDAP on an up-to-date Debian box. I'm trying to run a simple command: ldapsearch -x -h <<IP>>:636 -D cn=<<BASE DN>> -d1 and I get this output: ldap_create ...
0
votes
1answer
89 views

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 But it doesn't support DIGEST-MD5: $ ldapsearch ...
1
vote
1answer
26 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
2
votes
0answers
17 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
0
votes
0answers
36 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
2
votes
1answer
48 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
1answer
32 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...
0
votes
0answers
19 views

Custom schema for OpenLDAP 2.4

I am new to OpenLDAP administration. My aim is to learn how to create custom schemas, and customize "my" directory server this way. I tried to add one optional attribute - ipPhone. Made a schema ...
0
votes
0answers
28 views

ApacheDS create new ldap base domain

I want to create and manage multiple ldap base domains(domain.com, example.net..) on a single Ubuntu server 14.04. I created my second domain(dc=example,dc=com) through olc method by ldapadd -Y ...
0
votes
0answers
21 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
0
votes
1answer
225 views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
0
votes
1answer
120 views

What is SSHA-512? How can OpenLDAP support it?

I have two OpenLDAP directory servers. One is a standard Zimbra OpenLDAP server. Accounts are with passwords that are using SSHA-512 hash method. When I copy these accounts to a standard OpenLDAP ...
0
votes
1answer
44 views

LDAP passthrough authentication. testsaslauthd fails only with ldaps

I am trying to set up an OpenLDAP passthrough authentication to another server. When I do testsaslauthd with simple ldap:// the test works fine. When I try with ldaps:// it fails. ...
3
votes
1answer
40 views

Chasing referrals in Ldap

I'm currently improving a program featuring an ldap integration. This ldap integration is currently not able to handle ldap referrals. I do understand, that i will gen entries back that will hold the ...
1
vote
1answer
35 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
0
votes
1answer
122 views

SSH access to hosts groups based on user groups using LDAP

This is my entire test ldap database for now: # extended LDIF # # LDAPv3 # base <dc=ldap,dc=example,dc=com> (default) with scope subtree # filter: (objectclass=*) # requesting: ALL # # ...
0
votes
0answers
40 views

adding VLV support to OpenLDAP 2.4.31

Apologize in advance - I am not an admin, so the question being asked might be trivial. Still, I am stuck. Any assistance would be greatly appreciated. I am trying to add Virtual List View support to ...
0
votes
0answers
42 views

moving openldap server from centos to ubuntu

I am trying to setup ldap server on my ubuntu 14.04. I had previous ldap server setup installed on CentOS 6 which uses flat-file configuration i.e slapd.conf method for ldap. I did take backup for my ...
0
votes
1answer
58 views

can't get “memberof” to work in my OpenLDAP config

I'm trying to set up OpenLDAP on a Debian 7.7 server. While basic auth seems to work, I can't get the "memberof" overlay to work. Being new to LDAP, all that memberof config seems overly complex to ...
0
votes
0answers
25 views

Openldap Master Slave configuration

I have a configuration with a Master and Slave 4. Provider and Consumer are identical CentOS release 6.5 rpm -qa | grep ldap openldap-clients-2.4.23-34.el6_5.1.x86_64 ...